Two factor authentication with System local and CA certificate (with individual user certificate)

[psa3000]

Hi all,

I am using PSA with latest version 8.3 R4. Can I configurate two factor authentication with System local login together with CA certificate (with individual user certificate) which generated from Microsoft CA certificate server? If so, can user certificate exported to USB token instead of hardisk itself?

Thanks.....

[zanyterp]

If I am reading your question correctly, on if you can look for a certificate as well as do local auth, yes, that will work
As long as the browser recognizes the certificate as installed, you _should_ be able to use it on a USB token
Or if you are using a smart card, yes, that works
There are several options for configuration; what is the auth sequence you are looking to do? (It may be beneficial to open a case as well)

[psa3000]

Can all the user certificate stored in PSA and user token for authentication? (i.e. No additional certificate server required to link-up for authentication)

[zanyterp]

You do not need to use CRL or OCSP is that is not something your PKI has configured currently.
Can you clarify how you mean by "no additional certificate server required to link-up for authentication", please?